[openssl-dev] Openssl 1.0.2c include the FIPS 140-2 Object Module

Patil, Ashwini IN BLR STS ashwini.vpatil at siemens.com
Mon Jul 6 06:03:57 UTC 2015


Hello All,

I have used the below steps to integrate openssl-fips2.0.9 in openssl-1.0.2c :
Procedure for FIPS Enabled OpenSSL Module Compilation
=====================================================

    =================================
    1. Compile openssl-fips2.0 module
    =================================
        a. Extract the contents of openssl-fips-2.0.9tar.gz to C:\openssl-fips-2.0.9\
        b. Open Visual Studio 2008 Command Prompt.
        c. cd C:\openssl-fips2.0.9\
        d. Copy all the contents of "C:\Program Files\NASM" in this source folder
        e. ms\do_fips [no-asm] (nmake -f ms\ntdll.mak  &  nmake -f ms\ntdll.mak install are included in this command)

        Compiled FIPS module is located at C:\usr\local\ssl\fips-2.0.9

    =======================================================
    2. Integrate compiled openssl-fips2.0.9 in openssl-1.0.2c
    =======================================================
        a. Extract the contents of openssl-1.0.1e.tar.gz to C:\openssl-1.0.2c-fips-compliant\
        b. Open Visual Studio 2008 Command Prompt.
        c. cd C:\openssl-1.0.2c-fips-compliant\
        d. Copy all the contents of "C:\Program Files\NASM" in this source folder

        e. perl Configure VC-WIN32 fips --with-fipslibdir=C:\usr\local\ssl\fips-2.0.9
        f. ms\do_nasm
        g. nmake -f ms\nt.mak
        h. For Testing, use the following command: nmake -f ms\nt.mak test
        i. nmake -f ms\nt.mak install
        j. (If you want to create DLL files then Use the following commands  nmake -f ms\ntdll.mak  &&     nmake -f ms\ntdll.mak install)
        k. Compiled FIPS compliant OpenSSL exe is located at C:\usr\local\ssl\bin\openssl.exe
        l. Run C:\usr\local\ssl\bin\openssl.exe and type "version". You will be confirmed to get the following output.
            =======================================
            ****OpenSSL 1.0.2c-fips 12 June 2015****
            =======================================
        m. Compiled FIPS compliant OpenSSL fipslibeay32.lib, ssleay32.lib & libeaycompat32.lib are located at C:\openssl-1.0.1e-fips-compliant\out32
        n. Compiled FIPS compliant OpenSSL fipslibeay32.dll & ssleay32.dll are located at C:\openssl-1.0.1e-fips-compliant\out32

Build is successful and able to generate fipslibeay32.lib, ssleay32.lib, libeaycompat32.lib & ssleay32.dll.
But fipslibeay32.dll is missing. Please guide me .

Thanks&Regards
Ashwini V Patil
_____________________________________________
From: Patil, Ashwini IN BLR STS
Sent: Wednesday, July 01, 2015 11:55 AM
To: 'openssl-dev at openssl.org'
Subject: Openssl 1.0.2c include the FIPS 140-2 Object Module


Hello All,

Please let me know if openssl-1.0.2c include FIPS 140-2 Object Module.
Also please explain how to validate the application.

Your help is appreciated.

With best regards,
Ashwini V Patil

Siemens Technology and Services Private Limited
CT DC AA HC H1-FH STD IBP 6
84, Hosur Road
Bengaluru 560100, Indien
Mobil: +91 9008132565
mailto:ashwini.vpatil at siemens.com
http://www.siemens.co.in/STS

Registered Office: 130, Pandurang Budhkar Marg, Worli, Mumbai 400 018. Telephone +91 22 39677000. Fax +91 22 39677075. Other Offices: Bengaluru, Chennai, Gurgaon, Noida, Pune. Corporate Identity number:U99999MH1986PLC093854


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20150706/6190caae/attachment-0001.html>


More information about the openssl-dev mailing list